Associate, IT Governance Specialist

Details

In the Americas, ING’s Wholesale Banking division offers innovative financial products and services to domestic and international corporate and institutional clients. ING Americas follows a hybrid work model, allowing for in-office and work-from-home flexibility, with arrangements varying by business area.

The IT Service Provider Governance Specialist coordinates and executes Third Party and Intragroup Party Management (TIPM) activities on behalf of IT Service and Contract Owners, focusing on Americas IT Infrastructure services. The role ensures compliance with ING TIPM policy, risk control standards, and governance requirements, including pre-contracting due diligence and post-contracting oversight.

The position operates within the First Line of Defense and supports properly defined and governed service arrangements, control implementation and evidence, service reviews, continuous monitoring, remediation tracking, operational resilience, secure service delivery, and regulatory compliance. The role acts with and on behalf of IT Service and Contract Owners, while accountability remains with the Service Owners.

Responsibilities

• Execute TIPM governance activities across the full lifecycle, including pre-contracting due diligence, in-life governance, assessment, approval, registration, management, and exit readiness.
• Plan and execute TIPM control requirements, including third-party cybersecurity and business continuity evaluations.
• Coordinate risk assessments, baseline and due diligence activities, control monitoring, and the collection and assessment of vendor risk control evidence.
• Organize and facilitate regular Service Review Meetings and Strategic Service Reviews for critical and non-critical service arrangements.
• Coordinate assurance report reviews, cyber and operational risk monitoring, issue remediation, and risk mitigation actions.
• Support contracting activities and ensure operational and contractual considerations are addressed through transition and exit phases.
• Maintain TIPM registers, reporting, and audit evidence.
• Define and implement processes supporting compliance with TIPM policy, TPCRM, ITRS, FFIEC, NYDFS, DORA, internal standards, and other regulatory expectations.
• Coordinate with IT Service Owners, Application Owners, Procurement, Legal and Contracting, Operational Risk Management, CISO and IT Risk, Finance and Vendor Management, ODCR TIPM, external third parties, and intragroup providers.

Requirements

• Bachelor’s degree in IT, Risk Management, Finance, or a related field.
• At least 3 years of relevant experience.
• Experience in regulated banking environments preferred.
• Related certifications preferred, such as Certified Third-Party Risk Professional (CTPRP).
• Knowledge of TIPM, TPCRM, outsourcing, and third-party risk frameworks, including control standards, assessments, and supporting guidance.
• Experience in IT governance, vendor management, or operational risk.
• Ability to coordinate cross-functional stakeholders.
• Strong attention to detail and audit readiness.
• Risk awareness and structured problem-solving skills.
• Understanding of secure service delivery, operational resilience, continuous monitoring, and remediation tracking in regulated environments.

Success Criteria

• Complete and accurate TIPM register.
• Clear definition of Key Performance Indicators and Service Level Agreements for third-party and intracompany services.
• Timely execution of Service Review Meetings, Strategic Service Reviews, and Risk Control Self Assessments.
• Reduction in control gaps and audit findings.
• Audit-ready documentation and evidence.
• Positive stakeholder feedback.

Benefits

The role offers a base salary of $89,000–$113,000 and eligibility to participate in a discretionary bonus program. Benefits include health benefits, a 401(k) savings plan, paid time off, adoption, surrogacy and fertility services, student debt assistance, and subsidies for commuting and fitness expenses.

ING is an equal opportunity employer and hires without regard to protected characteristics.